Update - Security Advisory: CVE-2026-111497 - Hotfix Scheduled
We have prepared a fix for the critical vulnerability (CVE-2026-111497) affecting the Brotli decompression library used by .NET. The fix is an upgrade to a newer, uncompromised version of the .NET framework.
Code changes have completed development and are progressing through the test cycle. Assuming no blockers are identified, a hotfix will be released to Production on 6 November 2026 between 02:00 and 06:00 in each region's local time, rolling out region by region. Deployment will begin in Australia at 02:00 AEDT on 6 November (15:00 UTC on 5 November).
The network-layer mitigation blocking Brotli-encoded requests, implemented previously, remains in place alongside this fix. No customer action is required. Once the hotfix is confirmed stable across all regions, the Brotli-blocking mitigation will be removed.
Affected Regions:
- Australia
- Canada
- Europe
- Qatar
- South Africa
- United Arab Emirates
- United Kingdom
- United States East
- United States West
- OrbusInfinity Government (FedRAMP)
- OrbusInfinity Government (IRAP)
Next Update: Following completion of the hotfix deployment, or sooner if the situation changes.
Nov 04, 2026 - 17:21 UTC
We have prepared a fix for the critical vulnerability (CVE-2026-111497) affecting the Brotli decompression library used by .NET. The fix is an upgrade to a newer, uncompromised version of the .NET framework.
Code changes have completed development and are progressing through the test cycle. Assuming no blockers are identified, a hotfix will be released to Production on 6 November 2026 between 02:00 and 06:00 in each region's local time, rolling out region by region. Deployment will begin in Australia at 02:00 AEDT on 6 November (15:00 UTC on 5 November).
The network-layer mitigation blocking Brotli-encoded requests, implemented previously, remains in place alongside this fix. No customer action is required. Once the hotfix is confirmed stable across all regions, the Brotli-blocking mitigation will be removed.
Affected Regions:
- Australia
- Canada
- Europe
- Qatar
- South Africa
- United Arab Emirates
- United Kingdom
- United States East
- United States West
- OrbusInfinity Government (FedRAMP)
- OrbusInfinity Government (IRAP)
Next Update: Following completion of the hotfix deployment, or sooner if the situation changes.
Nov 04, 2026 - 17:21 UTC
Update - We are continuing to work on a fix for this issue.
Oct 30, 2026 - 17:55 UTC
Oct 30, 2026 - 17:55 UTC
Update - We are continuing to work on a fix for this issue.
Oct 30, 2026 - 17:52 UTC
Oct 30, 2026 - 17:52 UTC
Identified - A critical security vulnerability (CVE-2026-111497) has been identified in the Brotli decompression library used by .NET, as outlined in the NET October 2026 Out-of-Band Security Updates. This vulnerability affects OrbusInfinity across all regions.
Preventative Measures:
We are implementing preventative measures to protect customer data while a permanent patch is being prepared. These measures block requests with Brotli content encoding that could be exploited by this vulnerability. Some traffic may be impacted by these protective blocks.
Customer Impact:
Some requests using Brotli compression may receive 403 responses. No customer action is required. We recommend monitoring your integrations and API calls for any unexpected 403 errors and contacting support if you experience issues.
Affected Regions:
- Australia
- Canada
- Europe
- Qatar
- South Africa
- United Arab Emirates
- United Kingdom
- United States East
- United States West
- OrbusInfinity Government (FedRAMP)
- OrbusInfinity Government (IRAP)
Next Steps:
We are working to deploy a permanent patch. Details on patching timeline and any further updates will be shared as soon as they are available.
Next Update: When patching timeline is confirmed or sooner if the situation changes.
Oct 30, 2026 - 17:50 UTC
Preventative Measures:
We are implementing preventative measures to protect customer data while a permanent patch is being prepared. These measures block requests with Brotli content encoding that could be exploited by this vulnerability. Some traffic may be impacted by these protective blocks.
Customer Impact:
Some requests using Brotli compression may receive 403 responses. No customer action is required. We recommend monitoring your integrations and API calls for any unexpected 403 errors and contacting support if you experience issues.
Affected Regions:
- Australia
- Canada
- Europe
- Qatar
- South Africa
- United Arab Emirates
- United Kingdom
- United States East
- United States West
- OrbusInfinity Government (FedRAMP)
- OrbusInfinity Government (IRAP)
Next Steps:
We are working to deploy a permanent patch. Details on patching timeline and any further updates will be shared as soon as they are available.
Next Update: When patching timeline is confirmed or sooner if the situation changes.
Oct 30, 2026 - 17:50 UTC
About This Site
Welcome to the Orbus Software Status Page
This page is your go-to resource for updates on the status of OrbusInfinity services across different regions. Here, you can find the latest information on any ongoing issues, historical outage records, and detailed summaries of resolved incidents.
SolutionsHub
Operational
Australia
Operational
OrbusInfinity
Operational
Business Architecture
Operational
Canada
Operational
OrbusInfinity
Operational
Europe
Operational
OrbusInfinity
Operational
Qatar
Operational
OrbusInfinity
Operational
South Africa
Operational
OrbusInfinity
Operational
United Arab Emirates
Operational
OrbusInfinity
Operational
United Kingdom
Operational
OrbusInfinity
Operational
Business Architecture
Operational
United States East
Operational
OrbusInfinity
Operational
Business Architecture
Operational
United States West
Operational
OrbusInfinity
Operational
Business Architecture
Operational
OrbusInfinity Government (FedRAMP)
Operational
OrbusInfinity
Operational
Solutions Hub
Operational
OrbusInfinity Government (IRAP)
Operational
OrbusInfinity
Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance
Major outage
Partial outage
No downtime recorded on this day.
No data exists for this day.
had a major outage.
had a partial outage.